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ABSTRACT 



User authentication information for network of a user and a 
name of a server to be accessed are sent from a client 
terminal to av USf-ririanaff f'rnr nt equip ment rea|i7^d hy nim nf 
servers-whkh constitute a network ? y stem. The user man- 
agement equipment sends the network address of that server 
and user authentication information registered for that server 
back to the client terminal. Using these pieces of 
information, the client terminal logs in that server. Each of 
the servers used by the user notifies the user management 
equipment of the actual accounts for the user at preferable 
times. Using the notified information, the user management 
equipment manages the actual accounts of each user. Each 
user ca n know, the total of actual accounts for the servers 
usedby accessing only the user management equipment. 

11 Claims, 8 Drawing Sheets 
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METHOD OF ASSISTING SERVER ACCESS terminal other than those incorporated with a coramunica- 

BY USE OF USER AUTHENTICATION tion program into which the required auto log-in information 

INFORMATION HELD IN ONE OF SERVERS was previously entered. Therefore, the user cannot use this 

AND A METHOD OF ASSISTING auto log-in capability for a computer terminal other than one 

MANAGEMENT USER ACCOUNT FOR USE 5 he uses daily, for example, a network terminal usually used 

OF SERVERS by another person or a personal computer (PC) not used 

daily as a network terminal. 

BACKGROUND OF THE INVENTION am further, in the conventional technique, a user or a 

The present invention relates to a method of assisting the network system manager logs in to each of servers con- 
access to a network system composed of a plurality of 10 nected to a network, to totalize accounts due for that user, 
servers that implement a host computer system, an elec- Especially, when the network system manager must repeat 
tronic mail (called e-mail) system and the like and a method this log-in and the totalizing operations for a lot of users, this 
of assisting user account management requires a lot of time in accessing the servers and totalizing 

In recent network systems, servers implementing different me accounts, 

systems have been connected to the- same network, so that 15 It is therefore an object of the present invention to provide 

any of the servers is available to the users. a server access method for enabling a network terminal not 

A special example of such systems is described in Chapter holding log-in information for a server to log in to the server. 

7 "NIS And System Management by Name Server," in It is a more specific object of the present invention to 

"SUN System Management," Ascii Corp., 1991. As provide a method of assisting users to access servers in a 

described, in a configuration having a plurality of ser ver network system from various terminals, in case the servers 

s ystems controHed"rjy a smgle"OS"(Op erating System) on a require log-in information of different formats, 

network, the registration of user authentication information It is further object of the present invention to provide an 

is performed to only one of the server systems, the infor- account management assisting method for assisting man- 

mation then being made available to others of the server ^ agement of an actual account for each user of a respective 

s ystems . This configuration makes it unnecessary for a user account for the user for servers in a network system, 

to additionally register the user's information to servers According to the present invention, to attain the first 

additionally connected to the server systems. Further, this mentioned object, one of the servers of a network system 

configuration allows a user to log in on any of the server nol d s f or each of the users having authorization to use at 

systems with the same user ID and the same password in the 3Q least part of the servers, user authentication information for 

same procedure. each of the servers available to the user, for example, a user 

However, in a general network system incorporating a ID and a password, registered for the user, and user authen- 

plurality of servers, user information must be registered for tication information for using the network system, registered 

each server separately and logging in to each server must be for the user, for example, a user ID for the network system 

performed using a procedure uniquely specified for each 35 and a password for the network system. When one of the 

server. Generally, logging in to one of these servers requires users enters its user authentication information for using the 

a user to enter a network address of that server and the user network system and information for specifying a destination 

authentication information such as a user ID and a password. server, for example its server name, into one of the client 

Generally again, the user authentication information is dif- terminals, these pieces of information are transmitted from 

ferent in format from server to server and must be entered ^ the client terminal to the above-mentioned one of the 

using a procedure uniquely specified for each server. servers. The above-mentioned one of the servers in turn 

For assisting the entry of the user authentication transmits user- authentication information to the above- 
information, a so-called auto log-in is employed. In this mentioned client terminal. This user authentication infor- 
method, a user enters in advance, a network address and user mation is information registered for the user having the 
authentication information far each of the server systems on 45 transmitted user authentication information and for allowing 
a network, into a communication program of a network the user to access the destination server specified by the 
terminal, such as a personal computer. If a user selects a transmitted destination server specifying information. The 
desired server system to be accessed, the program accesses client terminal logs in on the above-mentioned destination 
that server system with the network address entered for that server by use of the transmitted user authentication infor- 
server to access it, and then transmits the user authentication 50 mation for that server. 

information entered for that server to the server. The present invention allows the user to log in on any of 

If a user wants to know whether an account charged for the servers from a terminal in which the user authentication 

his usage of various servers in the above-mentioned general information for servers connected to a network system has 

network has exceeded his budget, the user must log into not been registered in advance. 

those servers to find accounts for this usage of respective 55 According to the present invention. ±0 attain thcabove- 

servers and total these accounts. A network system manager mentioned farther ohject^ ne of the servers connected to the 

also employs a similar method for determining the current network system c oll ects account information from eac h of 

account status of each user. the servjsB^alJLUSerJia vjjig authorizatioiifori usin g them 

„ wnnM . ™ r ^ rmT? «T,m*rrf/%vT hasused. Hie above-mentioned one server holds the account 

SUMMARY OF THE INVENTION « ■ n foSa tion ejected for each of the users having authori- 

However, the above-mentioned conventional method in zation for accessing the network. When one of the users 
which auto log-in is used is inconvenient in that, a user must enters its user authentication information for using the 
register auto log-in information for a plurality of servers in network system and a request for account display into one of 
each of the client terminals, if the user wants to use the client the client terminals, these pieces of information are trans- 
terminals. 65 mitted from the client terminal to the above-mentioned one 

Further, in the above-mentioned conventional method, the server; the ar^yjfcjnentioneA_one^sery er transmits to the 

user cannot use the auto log-in capability in a network client temiinallhe.acrount infor mation^associated with eac h 
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ofJhe_scrver^and held in thc^aboyejneiiti oned one server the servers 5, 7, and 9. The server start program 18 logs in 

for Jhe_usgr having the transmitted user authenticati on to the user management equ ipment 1 T bY_s endin gJjLuser 

i nformation. The client tennkal then displays the trans mit- authentication information necessary to log in to the user 

ted account information on a dispja^Tdevice! management equipment 1, such as the network user ID and 

The present invention allows the user to collectively know 5 password, and a name of a server to be used. Then, the server 

the actual accounts for the servers connected to the netw ork. start program 18 receives user authentication information for 

by logging only in one server. He need not log in on each of me server to be accessed, such as an ID and a password of 

Ihe servers and to totalize their actual accounts. the user and such information necessary for logging in the 

The above and other objects, features and advantages of serv 5 35 a network address (IP addre^) of the server. Based 

the present invention will become more apparent from the 10 on these pieces of information, the PC 4 logs in to the server 

accompanying drawings, in which like reference numerals to make communication wittV the server. — - 

are used to identify the same or similar parts in several The afeamL display pr&aaS Igjsjja rted when th e-user 

views. wanj^tojjjsplav me, account informatiojaJor jdLservers in 

the network . When started, the Ac co unt dis play pragr^i 19 

BRIEF DESCRIPTION OF THE DRAWINGS 15 communicates Iwitht he user jDan a gernehtequiprnent 1 to 

^ . . „ Mf re rei vc- th e i^Co^ nTurformati Qn f^^^^r^ ex^?^*^ 

FIG. 1 is a schematic diapam fllustating a system to ^ ^^^^ ^^4^^^ > 

which a server access method accordmg to the present ~rT 7 - ^~r^h — r~"^T-\y rr~~ 

invention is applied; The user management equipment 1 is characteristic to the 

m „ ^ . f , . , present embodiment and is realized by a personal computer 

FIG. 2 is a flowchart describing the operations of a server 20 or a workstation. In the user management equipment 1, a 

start program (18) and a network user ID translation pro- network user management file 2 stores log-in information, 

gram (13) shown in FIG. 1; such as us er authentication information like a user ID andX" 

FIG. 3 is a schematic diagram illustrating the transition of password foreich user, and user authentication information 

screens on a terminal display device at the time when the for each server like an ID and a password, and user account 

server start program (18) shown in FIG. 1 has been started; 25 information such as a budgetary account far the whole 

FIG. 4 is a diagram illustrating the general constitution of network for each user and an actual account for each server. 

a server management file (2) shown in FIG. 1; A/>erveT- jnanagementfile3 stores Stiff s* I'nfnmr^Hnn ahmit 

FIG. 5 is a diagram illustrating the general constitution of e ach of the servers connected to the netwo rk, 

a network user management file (3) shown in FIG. 1; 30 The user management equipment 1 comprises a network 

FIG. 6 is a schematic diagram illustrating the transition of user m translation program 13, a user ID management 

screens on a display device at the time of user registration by program 15, an account display program 14, and an account 

a user ID management program (15) shown in HG. 1; totalizing program 16 and so on. 

FIG. 7 is a flowchart describing the operations of an te user wants to use one of ^ e serVCT system the 

account totalizing program (Id) shown in FIG. 1; 35 network user m translation program 13 communicates with 

_ro 0 . „ . ^ ^ ^ c ^ the server^ start program 18 in PC 4, and verifies the 

FIG. 8 is aflowctart descnbing the operations of account and password If the network ID 

display programs (14 and W) shown in FIG. 1; and and passwprd are verified to be correct, the network user ID 

FIG. 9 is a schematic diagram illustrating the transition of translation program 13 transmits to the server start program 

terminal display screens at the time when one (19) of the 1 8 the user's authentication information registered for a 

account display programs has been started. ^serverjo be accessed and a network address of that server. 

DETAILED DESCRIPTION OF PREFERRED U i f??*^* *? USCr ^ters me us^thenticaxioiT 

*y rvix^L/ E^^^TAfl^TS ^^^^^ \ information for plural servers m the network into the user 

liVmjN I management equipment 1, the user can get the user authen- 

A server access assisting method and an account man- 45 jtication information for a desired one of the servers from any 

agement assisting method associated with the present inven- [terminal, to log in the desired server. It should be noted thatf 

tion will be described in further detail by way of a preferred Jthc user ID management program 15 is for registering the 

embodiment and modifications thereof with reference to the (user IDs and passwords for the network and the user IDs and 

accompanying drawings. ^jjasswords for other servers.. - . 

FIG. 1 shows a schematic diagram illustrating a network 50 The account totalizing program 16 is started by a server 

system employing the present invention. In this system, a accessed by the user to receive the account information 

server group including an e-mail server No. 1 (5), an e-mail about the user from that server. The account totalizing 

server No. 2 (7), and a host computer 9 are connected via a program 16 always holds the account information thus 

local area network (LAN) 11 to a personal computer (PC) 4, received for each user and for each of the servers in the 

which is used as a client terminal for these servers, and user 55 network. 

management equipment 1 for managing registration infor- When the account display program 19 in PC 4 is started 

mation of a network user and user account information. by the user, the account display program 14 in the user 

When viewed frnm thf» tres&flL uhe user managem ent management equipment 1 notifies the account display pro- 

e quipment 1 is also_o ne^af th e s ersersL Further, the server gram 19 of the account status of the user for all servers in the 

group is connected via a public telephone network 20 to a ^ network. Therefore, the juser does not need to access each 

remote PC 4A connected to a LAN 11C provided at a server to check forjhe user's accountjtaws^ 

destination of a business trip, a satellite office or the like. needs to access only the user mana'g^ftpt'^uipn^iir 1 to 

This remote PC 4A may be a portable terminal. get the account status. ) 

The PC 4 contains a server start program 18 and an pYhe servers sT?, and 9 have user management files 6,l?l\ 

account display program 19 which are characteristic to the 65 land 10, respectively, which hold the actual accounts of each \| 

present embodiment and operate under control of an oper- Juser along with the user authentication information of thej 

ating system (OS) 17. Each program is provided common to (user. 
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In what follows, the system of the present embodiment 
and its operations will be described in more detail 
(1) Server start procedure 

First, a server start procedure will be described with 
reference to FIGS. 2 and 3. 

Referring to FIG. 2, steps 81 through 91 represent a flow 
of the processing of the server start program 18, steps 101 
through 108 represent a flow of the processing of the 
network user ID translation program 13 of the user man- 
agement equipment 1, and step 110 represents the process- 
ing of the server. 

Normally, PC 4 displays a window 51 for the program 
manager on a display device 40, as shown in FIG. 3, and 



10 



these pieces of information to the server start program 18 
(step 106) and then waits for receipt of further information 
from PC 4 (step 107). 

Upon receiving the user authentication information 
including the ID and the password for the selected server and 
itsjaetww^daj^sjstep 86) ? me^server start program 18 
accesses the server having the network address, and, auto- 
n^_caUvJogs_m^ 
au^ejfe^pnjnfoimation (step 88). 

This auto log-in requires sending the server to be accessed 
the two pieces of information, the user ID and the password 
contained in the user authentication information, at different 
times. Normally, a server sends the terminal different com- 
mands which respectively request me terminal to send a user 



displays a command menu 55, a window for command entry ,« ^^ wm ^h respectively request the terminal to send a user 
in the program manager window 51. Further, PC 4 displays a uscr P assword - T* 16 terminal sends the user ID or 

program start icons such as a network log-in icon 56 and an password according to the type of the command 

account display ic on 57 in thexomman d menu 55. received. Therefore, for the auto log-in operation, it is 

^Whln the user selects the network log-in icon 56 using a ™S * 0re % . cad \ ^ brf^and the types of 
pointing device, such as a mouse, not shown, the server irt 20 Msswo^Conm^T^ ^ tiMsmssiion of a user ID or a 
program 18 of PC 4 is activated and starts communication ^ffT™ ^^^SAandccMmandTeAm the network 
with the network user ID translation program 13 of the user r^3£ tmnslnission ° fthe ™er 

management equipment 1 (steps 81 and 191\ , and the password respectively. These commands 

-n- ' h -,„Lf «. are also sent to the terminal when the user ID and the 

When achvated, fte server start program 18 newly dis- password are sent from the usermanaeeincnt wuiomTnt 1 to 
plays a log-in menu 58 as shown in a screen 52 of FIG. 3 and * Jh e terminal user management equipment 1 to 



. : „ ~ *" »™vvu^4*UlJl AKJ. JCU1U 

waits for an mput by the user (step 82). When the user enters 
the user ID 59_and password 60 for the network and presses 
an ENTER key; the server start prpgram(g)passes the user 
network authentication information such as the entered user 
ID 59 and password 60 to the user managemenkequipmW 3 1 
1 (steps 83 and 102). The aumentication information such*af) 
the user ID and password is registered in the server start / 
program 18 in advance and transmitted to the network user/ 
ID translation program 13 of the user management equip-l 
ment 1 by means of an auto log-in capability. " ^J : 



Thus, when the log-in operation is successful, PC 4 
displays a window for communication with the selected 
server as shown in a screen 54 of FIG. 3, in this example, an 
e-mail operation window 64, and ^xejajtesopmmunic^tion 
pr ocessing with the selected server (step_89). The comrniW 



jucation-processmg^ no, 

In this communication processing, the information 
entered in the window 64 by,the.user is transmitted to the 
& server the information received from the server is 

The netwek nser ffi .ans^on" p^am O Cecks the l^lt^^ZTu^-^T^ 
itwork user management file for the network user ID and rJL a«TT ~. ™ _L U .^__™ a l0g ^ ff ^ 



network user management file for the network user ID and 
the password, and transmits the check result to the server 
start program 18 (step 103) and then waits for receipt of 
farther information from PC 4 (step 104). As shown in FIG. 
4, the file 2 holds a user ID 71 for the network and a 
password 72 for the network associated with the user 
registered in advance. 

When the^ server start program 18 receives the tft erV 
r eaife (step 84), it displays a server selection mem j 61 
insteg^tiic log-iii me nu 58. if the check has been foiii»H 
Jgimal^sh own in a screen 53, and waits for an inout 5v 
fee use r (step 85), Th is server^ection menu61 is f or 
selecting a desired server from among the e-mail serversan d 
the host computer serve r, which are indicated bv the serv* 
v -— icons 62 and 63, respectively ., — 
If the check has been found abnormal, the server start 
program 18 goes back to step 82, displays the log-in menu 
58 again, and waits for input by the user. 

When the user selects one of the servers, for example one 
of the e-mail servers, the server start program 18 passes the 
name of the selected server to the network user ID transla- 
tion program 13 in the user management equipment 1 (steps 
-86 and 105). 

The network user ID translation program 13 gets the 
user's H) 75 and a password -76 registered for the selected 
server from the network management file 2. Further, the 
program 13 gets the network address (IP address) of the 



. 50 



55 



60 



* . ° ~ v ^ «wuws; vji uic iuoLiuii muuiaing a user iv is managed by the n 

selected server from the server management file 3. The file 65 manager through the user management equipment 1 
3 holds the network address for rarh nf th^ ct,™™ wu' *u_ ^5. 



mand (step 90). In this communication processing, the 
accessed server checks to see if the notified user authenti- 
cation information is the one registered far that server. If the 
user authentication information is found to be registered for 
that server, the communication with the user continues. The 
user authentication for the accessed server mentioned above 
is necessary, because some users directly log in to the server 
without using the user management equipment 1. 

When a log-off command is entered, the server start 
program 18 discontinues the communication with the server 
and the network user ID translation program 13 (step 91 and 
108). 

Subsequently, if the user selects another server through 
the server selection menu 61, generally the same processing 
as mentioned above is performed on the newly selected 
server. Thus, the communication with two or more different 
servers can be made through one server selection menu 61. 

^.^pre?5|E!^Encd em bodiment o f the invention, the' 
user can get the ID anxfthe password registered for any 
^F^gjyJ^iQggjgg Jo, «ifeejis^:managftment emiipment 
l^jQ tfaejiser canjlsjo^ej^o^ 

aa Ldoes not hol d IDs and passwords forjhese ser vers. - 
(2) Managing user ID and other information """""" 
The processing of the user ID management program 15 in 
the user management equipment 1 will be described by 
referring to FIG. 6. In the present embcxliment, the infor- 
mation including a user ID is managed by the network 



3 holds the network address for each of the servers as shown 
in FtG. 5. The network user ID translation program 13 sends 



When the user management equipment is in a waitiffjp- 
state, a display device 1A (CRT or the Hfce) of the user 
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management equipment 1 shows a screen 151. The com- 
mand menu 55 is a window for starting programs, in which 
there is the same network log-in icon 56 and account display 
icon 57 as those of FIG. 3, and a user registration icon 154 
not found in FIG. 3 is also shown. 

The user ID management program 15 is activated when 
the network manager performs such user management 
operations as user registration, change, and deletion on the 
display device 1A attached to the user management equip- 
ment 1. FIG. 6 shows screens for user registration. Examples 
of user change and deletion are performed in a similar 
manner and therefore are omitted from the description. 

When the system manager selects the user registration 
icon 154 using the mouse, not shown, the user ID manage- 
ment program 15 is activated and a screen 152 is displayed. 
A network user registration menu 155 is newly displayed 
This menu requires the user to enter the user ID and the 
password necessary for logging in to the network and a 
budgetary account necessary for using the network. When 
these pieces of data have been entered, a server registration 
menu 156 is displayed as shown on a screen 153. This menu 
requires the user to enter an ID and a password for each 
server to be accessed. When these pieces of information 
have been entered, the user ID management program 15 
stores the user information entered so far into the network 
user management file 2 and the user management file #3 (10) 
o£tne server to be accessed. ^ 
It should be noted that the user ID management program^ 
15 notifies each server to be accessed of the newly registered 
user authentication information for that server. The notified 
server in turn registers the authentication information for 
that server in to the user management file 6 or the like. 
The above-mentioned operations simplify the processing 



10 



to the account display program 19. Referring to FIG. 8, steps 
121 through 126 indicate the processing flow of the account 
display program 19, while steps 131 through 134 indicate 
the processing flow of the account display program 14 in the 
user management equipment 1. 

As an initial screen of the display device 40 of PC 4, a 
screen 51 of FIG. 9 is shown. This screen is the same as the 
screen 51 of FIG. 3. When the account display icon 57 is 
selected with the mouse, not shown, the account display 
program 19 is activated, thereby to communicate with the 
account display program 14 of the user management equip- 
ment 1 (steps 121 and 131). Then, as shown in a screen 52 
of FIG. 9, the program 19 displays a log-in menu 58, and 
gets in the state waiting for an input by the user (step 122). 
15 This screen 52'is the same as me.saeen52.of FIG. 3. 
When the user enters the user ID 59 and the password 60 
for logging in to the network, the account display program 
19 sets a communication path with the account display 
program 14 of the user management equipment 1, and passes 
20 the entered user ID 59 and the password 60 to the program 
14 (step 123). 

Upon receiving the above-mentioned information, the 
account display program of the user management equipment 
1 checks to see if the network user ID and password are 
registered in the network user management file 2 (step 132). 

If the network user ID and the password have been found 
to be registered, the account display program 14 collects 
from the network user management file 2, the actual 
accounts of the servers used for that user and transmits the 
collected account information to PC 4. If the check per- 
formed in step 132 has been found to be abnormal, the 
program 14 notifies PC 4 thereof (step 133). 
The account display program 19 of PC 4 receives the 



25 



30 



SJ!^ 35 account formation coming fern the account display pro- 

^4 „, 4 „ „ ~ *«™ ~ * ~ gram 14 of the user management equipment 1 (step 124) and 

displays an account display menu 256 on the display device 
40 of the PC 4 as shown in a screen of 253 of FIG. 9 (step 
125). Then, the communication between the account display 
The processing flow of the account totalizing program 16 40 program 19 of PC 4 and the account display program 14 of 



registration conventionally made by logging in to each of the 
servers has been replaced by registration to the user man- 
agement equipment 1. ^ 
(3) Totalizing account information 



of the user management equipment 1 will be described by 
referring to FIG. 7. The account totalizing program 16 is 
activated when a user causes each of the servers to be used 
like the e-mail servers and the host computer server. 

Normally, the account totalizing program 16 is in a state 45 
waiting far information coming from a server (step 140). 
When activated from the server, the account totalizing 
program 16 receives from the server, an actual account for 
the user who has just used that server, to update an actual 
account 77 in the network user management file 2 for that so 
user. It should be noted that the program 16 receives from 
that server the user ID and password of that user for that 
server to determine an entry in the file 2 of the actual account 
77 to be communicated (step 141). Then, the program 16 
determines whether the actual account for the user has 55 
exceeded that budgetary account (step 142). If the actual 
account has been found to be excessive, the program 16 
notifies each server to prohibit the access to that server from 
that user (step 143) and enters into the wait state again. 

(4) Displaying account information Now. the processing 
flows of the account display program 19 in PC 4 and account 
display program 14 in the user management equipment 1 
will be described by referring to FIGS. 8 and 9. The account 
display program 19 is used when the user wants to know its 
account status S. This program displays to the user the actual 65 
accounts of all servers used by that user. The account display 
program 14 supplies data on the actual accounts of that user 



the user management equipment 1 comes to an end (steps 
126 and 134). 

Thus, the user only needs to log in to the user management 
equipment 1 to know the account status of that user for the 
entire network. He needs not log in to each of the servers 
separately for account totalization. 

Modifications: 

(1) In the above-mentioned preferred embodiment of the 
present invention, the system manager instructs the user 
management equipment 1 with respect to user management 
such as user registration. Instead, a request for user man- 
agement such as user registration may be made to the user 
management equipment 1 from a user terminal to make the 
user management equipment 1 automatically perform the 
above-mentioned processing for the user management 

ibed in the above-mentioned embodiment 

te function to be executed by the user manaflemen 
e quipment 1 as described in the above-mentioned embodi - 
ment may be executed bv one of , me_servers that implemen ts 
anyof the systems. In this modification, user authenticatio n 
i nformation for each user, registered in that server, may ' 
us ed instead of the user aumentication inixlnBaae^or m e 
giorfc.' 

(3) Instead of the LAN described in the above-mentioned 
embodiment, a public telephone line network may be used 
for the network to connect a plurality of servers. 
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(4) In the above-mentioned embodiment, the user man 
Wt equipment 1 receives me account 
?.°f wh0 T has ™* » server, in response to activation by 

^WJfee above-mentioned embodiment, each terminal 
www ; from the user management equipment 1 the log-in 

? 4 T t0 1,6 ^eTand that termlal 
transmits the log-in information to that server InsteaTZ 
user management equipment 1 may accLTftats^S 
Jen relay the communication between the terminal me 
server accessed, L. this method, however, if the number of 
^creases, the user management eqmpmentTL* 15 
perform the log-in processing of all users. This sometimes 

respect, the above-mentioned eirAodiment is better man this 
variation in that no such delay is caused. 

2£2L^T? re0aVed from me user management 
S 1 " t Us t? * """"fc^ k)g in to a servt from 
fte «er may use this authentication 
information to manually log in to a server. 

9M ^ lding I"** Mention, in using a plurality of 

. to " netwwk > ■» antScationinf^ 

mation such as user IDs and passwords of formats different 
from^crver to a server need not be registered in e£E 

^^a«»rdtagtome^esemi,rvention,whenmeuser 
n^gement such user registration and deletion is all 
performed by the user management equipment 1 me user 
management need not be performed ^Lb s^ver se^ 

Still further, according to the present invention the actual 
accounts for the plurality of servers conn«Kme1ef 
work may be collectively determined only byToX in to 
flic user management equipment 1, eliminating thlSsirv 

What is claimed is: 
, i„ -^ff a?* 1 °f assisting account information management 
^^^^.^"BaTa^tyof server f,Zt 

^cSh^^^^ ° f ^ server 
irrformafeB.froTn each server for each of plural 
users whoffivel^orization to access said each server 
via a client terminal . 
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. 25 



30 



via a client terminal; 

h °l^T^l aidp!!ItiaSiat SerVer ' account information for 
server? gaheral from P^ty of 

trance by one chent terminal connected to said 
S£ £ on e Particular server, user authentica- 
^^^° npi ^ tenninedforo n e <>fsaidu S ersfor 
said particular server and an account display request 

tracing, b y said particular server to said one client 
teminal, account information as gathered by said par- 
h^serverfromsaidpluralityofserversfeauser^ 
nag, been assigne d: and ~ 

displaying said bummfbm infor^tio^by said 

one chent terminal. V - - ' J 

2 Amethod according to claim 1, wherein said gathering 
step wmr^esastep of transfer^ 
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60 



65 



one of said users from one of said plurality of servers each 
□me when said one user ceases to use said one^4 

steo t7£ T° Tdiag t0 Ckim wherei » ^d gathering 
step comprises the steps of: ^ 

transmitting by said particular server, an inquiry about 

at regular timings; and 
transmitrmg, by each of said plurality of servers to said 
partcutar server, account information for each of the 
users who have authority to access said cachserver to 
response to said inquiry. ' 

fJ lT?"" 1 ofas f s ^ account information management 

network system, comprising the steps of : 

(a) of!^ g ' ty a paRiCUlar server «aid plurality 
of servers, server account information from each server 
for each of phtraJ users who have authorizahoTto 

representing an account to be charged to said each user 
for usage each of said servers; ^ 

^ijfffi" ft*-*** s«ver(i) user authentication 
irfonMUonfordisoiim^ 
have authorization to use said aetwork sy steroid ® 
account information for each of sdd plural u^Tabo^ 
an account to be charged to said each "user fcr«£S 
at least one of said plurality of servers- 
ttfcwntttag, by a client terminal connected to said 
network .system, to said particular server, user authen- 

and an account display request; 
(d) checking by said particular server, a validity of said 
transmitted user authentication information taS 
q« .a rJuraliry of pieces of user aumenticatfcn 2£ 

mahoneachasagnedtooneofsaapluralusers asheld 
m said partkular server, and translating 

^j^'^^^^^nt informa- 
tion held in said particular server for a user to whom 

m case said checking confirms validity of saSS 
mined user authentication infonnauon- and 

(6 iSS± y i aid teM ' ^"ntted 
cnSr^n^ ,l0,, " * «** ^ ™* «*> 

s4s rfr h0d aCC0Kfin8 10 ^ comprising the 

""tSSfJ" P8rtiCUlar ^ a mail for 

each of said users on a sum of accounte torespeato 
servers for said each user; *^ 

^ amount information 

heM therein for each user, each time when said each 
user uses one of said plurality of servers, said updating 
being executed depending upon amount ofacuTaJ 
usage, of said one server; 
judging, by said particular server, whether an actual 
*am t to be charge to said each user has e*«Sd 
said budgetary limit held for said each user, baseSm 
said updated account information; and 

l °TZT e V* "* rfMe '^Plurality of servers 
by said each user, when said actual account has 
exceeded said budgetary limit 

J;!^ 0 * .f^ 8 10 S ' whereiB said limiting 
step comprises the steps of: 

informing by said particular server, each server that an 

ST f °J ° ne ° f users ^ exceeded sZ 
budgetary limit held for said user, and 
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limiting, by each server, subsequent use of said each 
servers by said one user. 

7. A method of assisting in obtaining access by a client 
computer to a plurality of servers which are connected by a 
network, comprising the steps of: 5 

logging in a predetennined one of said plurality of 
servers, by a client computer, connected to said 
network, in response to a request by a user, by sending 
to said predetermined server first user authentication 
information predetermined for use by said user for 10 
accessing said predetermined server, wherein each of 
said plurality of servers, other than said predetermined 
server, holds a plurality of second user authentication 
information each predetermined for access to the 
respective server by a user who is permitted to access *5 
said server, and wherein said predetermined server 
holds said plurality of second user authentication infor- 
mation stored in said plurality of servers, other than 
said predetermined server; 

transferring a request from said client computer to said 20 
predetermined server for second user authentication 
information predetermined for use by said user for 
accessing one of said plurality of other servers which 
said user has selected; 

transmitting, from said predetermined server, said 
requested second user authentication information to 
said client computer for use in accessing said selected 
server; 

logging in said user selected server, by said client 30 
computer, using said transmitted second user authenti- 
cation information; and 

updating at least one second user authentication informa- 
tion for a user for one of said other servers, said 
updating step including the steps of: 35 

(a) updating a portion of said plurality of second user 
authentication information held by said predeter- 
mined server, with respect to said at least one second 
user authentication information for said user for 
access to said other one server, and 40 

(b) transferring, from said redetermined server, said 
updated portion of said second user authentication 
information held thereby to said other one server, to 
update a plurality of second user authentication 
information held thereby, which is predetermined for 45 
said user for access to said other one server. 

8. A method according to claim 7, wherein said updating 
step further includes a step of adding new user authentica- 
tion information to said plurality of user authentication 
information held by said predetermined server for said 50 
plurality of servers other than said predetermined server, 
said new user authentication information being determined 
for a user who has been newly admitted to access one of said 
plurality of servers other than said predetermined server. 

9. A method according to claim 7, wherein said step of 55 
updating said plurality of user authentication information 
held by said predetermined server is executed by operations 

of a system manager. 

10. A method of assisting in obtaining access from a client 
computer to a plurality of servers which are connected by a 60 
network, comprising the steps of: 

logging in a predetermined one of said plurality of 
servers, by a client computer, connected to said 
network, in response to a request by a user, by sending 
to said predetermined server first user authentication & 
information predetermined for use by said user for 



accessing said predetermined server, wherein each of 
said plurality of servers, other than said predetermined 
server, holds a plurality of second user authentication 
information each predetermined for access to the 
respective server by a user who is permitted to access 
said server, wherein said predetermined server holds (a) 
said plurality of second user authentication information 
for said plurality of servers, other than said predeter- 
mined server, and (b) a plurality of server addresses of 
said plurality of servers; 

transmitting a request from said client computer to said 
predetermined server for transfer of second user 
authentication information predetermined for said user 
to effect access to one of said plurality of other servers 
which said user has selected; 

transmitting, from said predetermined server to said client 
computer, said requested second user identification 
information and one of said plurality of server 
addresses corresponding to said user selected server; 
and 

logging in said user selected server, by said client 
computer, using said transmitted server address and 
said transmitted second user identification information. 

11. A method of assisting in obtaining access by a client 
computer to a plurality of servers which are connected by a 
network, comprising the steps of: 

logging in a predetermined one of said plurality of 
servers, by a client computer, connected to said 
network, in response to a request by a user, by sending 
to said predetermined server first user authentication 
information predetermined for use by said user for 
accessing said predetermined server, wherein said plu- 
rality of servers include servers which transmit com- 
mands which are different from each other depending 
upon said servers when said servers request user autho- 
rization information, each of said plurality of servers, 
other man said predetermined server, holding a plural- 
ity of second user authentication information each 
predetermined for access to the respective server by a 
user who is permitted to access said server wherein said 
predetermined server holds (a) the plurality of second 
user authentication information predetermined for said 
plurality of servers, other than said predetermined 
server, and (b) a plurality of commands predetermined 
for said plurality of other servers; each of said plurality 
of commands predetermined for a corresponding one of 
said plurality of other servers being a command which 
said one server transmits when said one server requests 
user authorization information; 

transmitting a request from said client computer to said 
predetermined server for transfer of second user iden- 
tification information predetermined for use by said 
user to access one of said plurality of said client 
computer said requested second user identification 
information and one of said plurality of commands 
predetermined for use by said user selected server; and 

logging in said user selected server, by said client 
computer, by sending said transmitted second user 
identification information to said user selected server 
from said client computer, in response to receipt of the 
same command from said user selected server as said 
one command transmitted from said predetermined 
server. 
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